Skill rating

Senior Quality Manager Responsible Person (QMR) for HealthTech and MedTech companies. Provides overall quality system responsibility, regulatory compliance oversight, management accountability, and st

Manage the advisor trade lifecycle from order entry through settlement, covering block trading, allocation, pre-trade compliance, custodian routing, and error correction. Use when the user asks about

Master essential security scanning tools for network discovery, vulnerability assessment, web application testing, wireless security, and compliance validation. This skill covers tool selection, confi

EU MDR 2017/745 regulation specialist and consultant for medical device requirement management. Provides comprehensive MDR compliance expertise, gap analysis, technical documentation guidance, clinica

Senior GDPR/DSGVO expert and internal/external auditor for data protection compliance. Provides EU GDPR and German DSGVO expertise, privacy impact assessments, data protection auditing, and compliance

Implements, reviews, or improves accessibility in iOS/macOS apps with SwiftUI, UIKit, and AppKit. Use when adding VoiceOver, Voice Control, Switch Control, or Full Keyboard Access support; when workin

Amazon product listing image strategy and optimization. Comprehensive shot planning, infographic design, lifestyle photography, mobile optimization, and conversion-focused visual content. Use when the

Expert at handling file uploads and cloud storage. Covers S3, Cloudflare R2, presigned URLs, multipart uploads, and image optimization. Knows how to handle large files without blocking.

MUST be used whenever fixing dependency issues in a Flows app. This skill finds AND fixes vulnerabilities, outdated packages, deprecated dependencies, and license issues — it does not just report them

Guide the design and implementation of automated pre-trade compliance systems that validate orders before execution. Use when building a compliance rule engine for an RIA or broker-dealer, configuring

Identify security vulnerabilities through SAST, DAST, penetration testing, and dependency scanning. Use for security test, vulnerability scanning, OWASP, SQL injection, XSS, CSRF, and penetration test

Process account maintenance requests across the account lifecycle. Use when changing a client address or contact info with identity verification, updating beneficiary designations after marriage, divo

Guide the understanding and management of trade settlement and clearing processes. Use when designing settlement workflows for T+1 compliance, understanding DTC/NSCC/FICC clearing infrastructure, anal

Threat modeling workflow for software systems: scope, data flow diagrams, STRIDE analysis, risk scoring, and turning mitigations into backlog and tests. Use when designing new features, reviewing arch

Guide the design and maintenance of recordkeeping programs under SEC Rules 17a-3, 17a-4, and 204-2. Use when the user asks about document retention schedules, how long to keep trade records or custome

Official document writing assistant for Chinese government documents based on GB/T 9704-2012 standard. Triggers when: Writing Chinese official documents (公文), formatting documents according to nation

Design and implement next-best-action engines that surface proactive, prioritized recommendations to advisors based on portfolio, life, market, and compliance events. Use when the user asks about buil

Analyzes the founder's business context to deliver 3 best go-to-market strategies tailored to their current stage, product, and market. Asks up to 10 diagnostic questions when needed to understand pro

Understand anti-reversing, obfuscation, and protection techniques encountered during software analysis. Use this skill when analyzing malware evasion techniques, when implementing anti-debugging prote

Ensure firms claiming GIPS compliance under the CFA Institute Global Investment Performance Standards satisfy requirements for composite construction, performance calculation, presentation, and verifi

Use when checking for security vulnerabilities in NanoClaw skills, before installing new skills, or when asked about security advisories affecting the bot

Security best practices and vulnerability prevention for Golang. Covers injection (SQL, command, XSS), cryptography, filesystem safety, network security, cookies, secrets management, memory safety, an

Encrypted backup and restore for OpenClaw Agent workspace files (SOUL.md, MEMORY.md, IDENTITY.md, AGENTS.md, TOOLS.md). Uses tar + openssl (AES-256-CBC) encryption and soul-upload.com API. Auto-genera

Wires the Aura Topbar (@aura/topbar) into Flows/Fusion apps as the single top navigation bar — breadcrumbs, optional center Tabs or Segmented control, right utility strip (Share, notifications, theme

Build and manage advisory fee billing operations from fee schedule design through calculation, collection, revenue recognition, and compliance disclosure. Use when the user asks about tiered or breakp

MUST be used whenever fixing security issues in a Flows app, or before shipping any feature that handles credentials, user input, or external data. This skill finds AND fixes security problems — it do

Complete security architecture overhaul for claude-flow v3. Addresses critical CVEs (CVE-1, CVE-2, CVE-3) and implements secure-by-default patterns. Use for security-first v3 implementation.

Master memory forensics techniques including memory acquisition, process analysis, and artifact extraction using Volatility and related tools. Use when analyzing memory dumps, investigating incidents,

Design native iOS interfaces following Apple Human Interface Guidelines. Use when the user mentions "iPhone app", "iPad layout", "SwiftUI", "UIKit", "Dynamic Island", "safe areas", "HIG compliance", "

GDPR Compliance Check — General Data Protection Regulation (EU) 2016/679 (GDPR). Free to install; scoring runs on the CQDev cloud compliance engine. No Key? The skill auto-runs an anonymous trial (5

Harden a ZK-Bankir sovereign banking deployment — threat model audit, hash-chain integrity, dependency scanning, access control review, and runbook validation against De 10 Gebuden.

Cross-Border E-Commerce Compliance Check — Cross-border e-commerce rules: customs, product safety, consumer protection, tax (VAT/GST), advertising, and data privacy of destination markets. Free to in

Universal Web3 & Crypto operating skill for AI agents. 12 domains, 60+ API endpoints, 5 providers: OKX DEX aggregator, Binance Web3 intelligence, Binance/Gate.io/Bitget Spot. Production-grade patterns

Run a world-class security assessment before installing any external package, CLI, npm module, Python library, or third-party integration. Produces a GO/NO-GO/CONDITIONAL verdict with source code anal

Review claims in a Japanese patent application or a PCT/Paris-route application intended for Japan across six dimensions: Japanese Patent Act/JPO compliance, evidence-backed novelty and inventive-step

LeafEngines - TurboQuant-Powered Environmental/Agricultural API. MCP Server v1.1.0 providing agricultural intelligence for Claude and OpenClaw with 6x memory reduction, 8x faster inference. 10 tools f

|-。审代码安全漏洞/实现认证流/审计依赖,安全合规。Use when 需要安全检测、合规审计、漏洞扫描、加密防护时使用。不适用于渗透测试未授权目标。适用于独立开发者、企业团队和自动化工作流场景。支持中文交互，无需复杂配置即开即用。输出结果可直接使用，减少二次加工成本。提供结构化输出和错误处理机制。

AI 拟人化互动服务合规检查 — 基于《人工智能拟人化互动服务管理暂行办法》（国家网信办等五部门令第21号，2026-07-15 施行），覆盖 10 项核心检查，快速评估合规状态并生成专业报告。 本 skill 免费安装、免费使用。检查评分由「complianceHub 引擎」完成： 首次使用前需在 compliancehub.cn 免费注册获取 API Key（网页注册后复制 Key， 设置环

AI 科技伦理审查合规检查 — 基于《人工智能科技伦理审查与服务办法(试行)》（工信部等十部门，工信部联科〔2026〕75号，2026-03-20 施行），覆盖 10 项核心检查，快速评估合规状态并生成专业报告。 本 skill 免费安装、免费使用。检查评分由「complianceHub 引擎」完成： 首次使用前需在 compliancehub.cn 免费注册获取 API Key（网页注册后复制

Cryptocurrency address risk analysis, AML compliance checks, and on-chain transaction tracing using the MistTrack OpenAPI. MistTrack is an anti-money laundering tracking tool developed by SlowMist, su

医疗器械出海数据合规：GDPR / HIPAA / 中国个保法（PIPL）、数据出境安全评估、隐私影响评估（PIA/DPIA）。输出数据流映射清单与合规要点，降低联网器械出海的数据合规风险。

带传感器/APP/云的智能医疗器械（IoMT）合规助手：SaMD+SiMD注册路径、网络安全IEC 81001-5-1、UDI追溯、RPM远程监测。3分钟理清联网器械的NMPA/FDA/MDR合规拼图，输出可提交文档清单与要点。

Technical GDPR compliance audit — data mapping, encryption verification, access control review, data retention analysis, DPIA templates, and cross-border transfer assessment. Distinct from gdpr-checke

医疗器械合规度量化评分工具——8 大合规维度（注册路径/技术文件/风险管理/临床评价/标签IFU/软件网络安全/上市后监管/质量体系）0-5 分制评分 + 评分锚点 + 一键生成自包含 HTML 评分卡（雷达图 + 明细表 + 改进建议，纯 SVG 无外部依赖）。注册前自评、发补整改效果验证、多产品横向对比都能用，评分维度与锚点附法规依据（ISO 14971、MDR、121 号公告等）。

Detect potential phishing URLs and suspicious contracts targeting NEAR users.

区块链安全扫描专业版,为DeFi团队与机构用户包含全方位链上安全防护. 适合需要aegis security tool相关能力的开发场景,提供结构化工作流程和配置说明。适用于独立开发者、企业团队和自动化工作流场景，提供结构化输出与错误处理机制，支持中文交互，即开即用。Use when 用户需要区块链安全扫描专业版相关功能时使用。不适用于超出本技能能力范围的复杂需求。

Analyze Gmail via gog CLI + AI (preferred) or Python scripts (fallback). Classify, prioritize, detect phishing/prompts, extract tasks, summarize threads.

Structured question generation to de-risk ambiguous areas before implementation planning.

🩺 Free Security & Health Audit. Your OpenClaw deserves a check-up. This skill performs a non-invasive scan to detect security risks, outdated software, and misconfigurations.

Cybercentry Wallet Verification on ACP - Real-time wallet authenticity validation and high-risk address detection. Identify fraud, scams, and illicit activity for just $1.00 per verification.